Splunk Search

Insert a heading for 4 rows and give name using HTML

vijaykumartcs
Explorer

I have a dashboard which has 11 rows and each row has 4 panels, now out of 11 rows 5rows belong to one application and another 6 rows belong to another application.

I want to combine 5 rows and name it as "Application A" and combine 6 rows and name it as "Application B" within the same dashboard.

Labels (1)
Tags (3)
0 Karma
1 Solution

renjith_nair
SplunkTrust
SplunkTrust

Are you looking for something similar to below?

<dashboard>
  <label>Headings</label>
  <row>
    <panel>
      <html>
      <h1 align="center">Application A</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>First Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </table>
    </panel>
    <panel>
      <chart>
        <search>
          <query>| makeresults |eval count=10</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">pie</option>
        <option name="charting.drilldown">none</option>
      </chart>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h4 align="center">other rows</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h1 align="center">Application B</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>6th Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

 

View solution in original post

renjith_nair
SplunkTrust
SplunkTrust

Are you looking for something similar to below?

<dashboard>
  <label>Headings</label>
  <row>
    <panel>
      <html>
      <h1 align="center">Application A</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>First Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </table>
    </panel>
    <panel>
      <chart>
        <search>
          <query>| makeresults |eval count=10</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">pie</option>
        <option name="charting.drilldown">none</option>
      </chart>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h4 align="center">other rows</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
      <h4 align="center">.</h4>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <html>
      <h1 align="center">Application B</h1>
    </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>6th Row</title>
      <table>
        <search>
          <query>|makeresults count=5|eval value=random()</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

 

View solution in original post

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!